Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
File: k8ONPhxOflQ6Nsi2NT62baTatAs.mft (raw, json)
Hash identifier: sDqoezUUwhSUXsYXhkmRVO2OqcIakZdqq188Nz9EVO0=
Subject key identifier: E8:24:71:E2:46:7F:C6:6E:84:AC:A9:47:AC:CC:A6:4B:06:BF:BD:47
Authority key identifier: 93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
Certificate issuer: /CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Certificate serial: 01976C62566B797901565734511CAA7FB05F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 03:01:13 +0000
Manifest this update: Sat 14 Jun 2025 03:01:13 +0000
Manifest next update: Sun 15 Jun 2025 03:01:13 +0000
Files and hashes: 1: VRs8CShO6bRg5uI1JwT1RKe3PrI.roa (hash: fbnkM+ZXK5PucV+W/pV7w3InLQ8yhq+sy8zU5D/9V1k=)
2: k8ONPhxOflQ6Nsi2NT62baTatAs.crl (hash: vRcH+9Lx5Eh36Kv+bkEz5vfSbuLiz7GcQWiUemegw3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:56:6b:79:79:01:56:57:34:51:1c:aa:7f:b0:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c38d3e1c4e7e543a36c8b6353eb66da4dab40b
Validity
Not Before: Jun 14 03:01:13 2025 GMT
Not After : Jun 15 03:01:13 2025 GMT
Subject: CN=e82471e2467fc66e84aca947accca64b06bfbd47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:e2:4e:a7:f1:cd:2e:11:81:15:ee:a5:79:
d8:8b:f0:b7:58:3d:68:32:ed:7e:89:64:14:62:57:
51:20:a1:2d:2e:19:f0:3f:2e:66:1b:e2:92:52:39:
71:51:ab:76:78:43:17:25:a0:8e:2c:a5:51:3d:c7:
ae:21:c9:b4:a9:cc:7c:dd:c9:03:9a:7f:e8:3f:d2:
72:0f:42:a7:4c:ed:dc:c9:b3:c2:6e:07:c7:e2:86:
04:bd:2f:cf:58:ee:c1:f1:b7:aa:67:46:1e:0a:86:
73:f5:e3:7a:4d:22:4b:52:80:01:fd:7b:4d:46:30:
1d:e8:d8:19:94:2a:28:c3:dd:28:e2:dc:1f:ae:57:
3b:1b:01:10:e8:62:38:91:09:c0:1d:00:5c:df:62:
03:cb:5a:22:81:e6:11:f6:2b:16:2b:40:0d:18:3a:
dd:b7:7d:24:5d:c5:e5:3a:ad:65:02:86:30:1c:60:
89:24:4b:46:4b:a1:53:bc:49:67:b7:9d:a4:1f:2e:
f8:75:3d:b5:60:f6:af:5a:d9:6a:d6:14:75:af:40:
b0:2e:4e:5e:df:22:fb:c7:81:09:3b:7c:a0:fa:5f:
9b:ff:71:f8:5e:73:dd:ea:7e:fe:9f:97:1e:98:a9:
14:97:34:62:3d:dd:2a:22:b1:90:d1:34:b5:f8:3b:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:24:71:E2:46:7F:C6:6E:84:AC:A9:47:AC:CC:A6:4B:06:BF:BD:47
X509v3 Authority Key Identifier:
keyid:93:C3:8D:3E:1C:4E:7E:54:3A:36:C8:B6:35:3E:B6:6D:A4:DA:B4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8ONPhxOflQ6Nsi2NT62baTatAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c71e30-c868-48fc-80df-36483139dc5e/1/k8ONPhxOflQ6Nsi2NT62baTatAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6d:73:7a:26:85:2a:3a:09:33:15:65:ae:81:06:2f:82:b2:
91:d3:5a:03:78:7a:3e:e7:f4:80:ae:0d:65:b8:1d:a7:d2:b8:
d2:2c:72:59:64:63:ab:9b:36:ae:58:a3:1d:c6:82:a7:21:e6:
b9:c7:59:48:64:ca:c6:2b:7a:69:fd:e3:dd:80:a1:97:bd:14:
f8:d6:1a:b3:85:3c:7d:4d:24:9f:8d:37:16:65:46:e4:c2:7e:
a0:83:f6:95:23:5b:20:95:89:16:aa:a3:b6:d5:71:36:ad:2c:
34:ed:8c:3e:8d:e7:43:29:7e:37:2b:f3:6c:c5:e1:2b:0f:b2:
fd:85:3d:75:e0:9f:db:5d:12:2c:ea:5f:31:05:5d:3c:27:8e:
99:51:62:7a:a6:e5:6e:42:4a:0b:cc:6d:38:b3:85:94:e1:ff:
f8:b8:7a:09:55:88:3b:b5:37:6c:1f:c3:7b:7f:ba:ca:6e:26:
34:0b:50:2b:5f:a3:6b:75:21:81:fa:d6:33:5d:5f:32:38:5d:
d0:b6:de:3f:d7:0b:20:3a:f9:1e:e8:1c:4c:b4:b5:13:30:d8:
91:ec:04:9a:26:ee:02:d3:dc:50:b3:4f:44:b3:27:a2:07:56:
27:3f:ee:37:f6:70:b5:7e:01:03:61:13:f6:95:e9:03:78:87:
25:51:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:56 2025 by rpki-client